Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-33811 (GCVE-0-2026-33811)
Vulnerability from cvelistv5 – Published: 2026-05-07 19:41 – Updated: 2026-08-24 12:06
VLAI
EPSS
VEX
Title
Crash when handling long CNAME response in net
Summary
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-08 14:25 UTC
Assigner
References
101 references
Impacted products
185 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Go standard library | net |
Affected:
0 , < 1.25.10
(semver)
Affected: 1.26.0-0 , < 1.26.3 (semver) |
guessed | |
| Red Hat | Cryostat 4 on RHEL 9 |
Unaffected:
4.2.0-19 , < *
(rpm)
cpe:/a:redhat:cryostat:4::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:1.6.6-1.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:2.5.10-7.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:2.6.17-2.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 10 |
Unaffected:
0:1.6.6-1.el10ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el10 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:2.6.17-2.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.152.1-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.9.27-7.el10_2.2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:3.7.1-5.el10_2.6 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.4.9.2-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.2.10-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.26.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.4.7-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.152.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.2.3-6.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:0.11-1.el7_9 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
1:0.2.5-8.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260709093628.afee755d , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:3.4.1-12.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.152.1-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.2.11-2.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:3.7.1-4.el9_8.2 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:0.152.1-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:0.152.1-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:1.32.0-6.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:0.2.1-1.1.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:3.3.23-22.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat OpenStack Services on OpenShift 18.0 |
Unaffected:
0:0.1.1-18.0.20260602234716.a95ae05.el9ost , < *
(rpm)
cpe:/a:redhat:openstack:18.0::el9 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 |
Unaffected:
0:0.0.4-1.el8sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el8 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el9 |
||
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.17::el9 |
||
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
||
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
||
| Red Hat | RHEM 1.0 for RHEL 9 |
Unaffected:
0:1.0.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | RHEM 1.1 for RHEL 10 |
Unaffected:
0:1.1.3-1.el10em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | RHEM 1.1 for RHEL 9 |
Unaffected:
0:1.1.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Streams for Apache Kafka 3.2.1 |
Unaffected:
danielqsj-kafka_exporter , < *
(rpm)
cpe:/a:redhat:amq_streams:3.2::el9 |
||
| Red Hat | Compliance Operator 1 |
Unaffected:
1786380082 , < *
(rpm)
cpe:/a:redhat:openshift_compliance_operator:1::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.0 |
Unaffected:
1785418851 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.4 |
Unaffected:
1782408807 , < *
(rpm)
cpe:/a:redhat:logging:6.4::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.2 |
Unaffected:
1784747813 , < *
(rpm)
cpe:/a:redhat:logging:6.2::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.5 |
Unaffected:
1786645248 , < *
(rpm)
cpe:/a:redhat:logging:6.5::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1784915379 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911941 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911952 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911945 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911975 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786912006 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911973 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911950 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911984 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786907276 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1783985999 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784306906 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | Multicluster Global Hub 1.5.6 |
Unaffected:
1784127491 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.5::el9 |
||
| Red Hat | Multicluster Global Hub 1.7.0 |
Unaffected:
1784768332 , < *
(rpm)
Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.3 |
Unaffected:
1785180878 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.3::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.6 |
Unaffected:
1784058822 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.6::el9 |
||
| Red Hat | OpenShift Developer Tools and Services 1.6.2 |
Unaffected:
1784727697 , < *
(rpm)
cpe:/a:redhat:source_to_image:1.6::el8 |
||
| Red Hat | OpenShift Developer Tools and Services 1.6.2 |
Unaffected:
1784728036 , < *
(rpm)
cpe:/a:redhat:source_to_image:1.6::el8 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1786908301 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Security 4.9 |
Unaffected:
1783357116 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1783357140 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.11 |
Unaffected:
1783352589 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.11::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1783962464 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1782767215 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502438 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194574 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127736 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.25.11-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.26.4-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 |
Unaffected:
1786483782 , < *
(rpm)
cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9 |
||
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783914276 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
||
| Red Hat | Red Hat Migration Toolkit for Applications 8.1 |
Unaffected:
1785171639 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_applications:8.1::el9 |
||
| Red Hat | Red Hat Migration Toolkit for Applications 8.2 |
Unaffected:
1784211378 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_applications:8.2::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.4.2 |
Unaffected:
1784061472 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.6.0 |
Unaffected:
1784152046 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1783544461 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1783946386 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.3 |
Unaffected:
1783057868 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1786490745 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.2 |
Unaffected:
1786525840 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1786573075 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1786526139 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1785704547 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift GitOps 1.19 |
Unaffected:
1782292352 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.19::el8 |
||
| Red Hat | Red Hat OpenShift GitOps 1.2 |
Unaffected:
1782383826 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.20::el9 |
||
| Red Hat | Red Hat OpenShift GitOps 1.21 |
Unaffected:
1782910941 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.21::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782222217 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782223341 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782296193 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782222607 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782222163 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782223138 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782222394 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782222451 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782226178 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782224487 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782303211 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782224541 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782223045 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782222366 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782310747 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782222038 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.12 |
Unaffected:
1785202723 , < *
(rpm)
cpe:/a:redhat:workload_availability_nhc:0.12::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.13 |
Unaffected:
1785203036 , < *
(rpm)
cpe:/a:redhat:workload_availability_snr:0.13::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.3 |
Unaffected:
1785203474 , < *
(rpm)
cpe:/a:redhat:workload_availability_sbr:0.3::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.7 |
Unaffected:
1785203508 , < *
(rpm)
cpe:/a:redhat:workload_availability_mdr:0.7::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.8 |
Unaffected:
1785203079 , < *
(rpm)
cpe:/a:redhat:workload_availability_far:0.8::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 5.7 |
Unaffected:
1785202847 , < *
(rpm)
cpe:/a:redhat:workload_availability_nmo:5.7::el9 |
||
| Red Hat | Red Hat Satellite 6.18 |
Unaffected:
1785923308 , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
||
| Red Hat | Red Hat Satellite 6.19 |
Unaffected:
1785929994 , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
4-1.4.2 , < *
(rpm)
Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Web Terminal 1.11 |
Unaffected:
1784296203 , < *
(rpm)
cpe:/a:redhat:webterminal:1.11::el9 |
||
| Red Hat | Red Hat Web Terminal 1.12 |
Unaffected:
1784247610 , < *
(rpm)
cpe:/a:redhat:webterminal:1.12::el9 |
||
| Red Hat | Red Hat Web Terminal 1.13 |
Unaffected:
1784296127 , < *
(rpm)
cpe:/a:redhat:webterminal:1.13::el9 |
||
| Red Hat | Red Hat Web Terminal 1.14 |
Unaffected:
1784296114 , < *
(rpm)
cpe:/a:redhat:webterminal:1.14::el9 |
||
| Red Hat | Red Hat Web Terminal 1.15 |
Unaffected:
1784296033 , < *
(rpm)
cpe:/a:redhat:webterminal:1.15::el9 |
||
| Red Hat | Red Hat Web Terminal 1.16 |
Unaffected:
1784295767 , < *
(rpm)
cpe:/a:redhat:webterminal:1.16::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | cert-manager Operator for Red Hat OpenShift |
cpe:/a:redhat:cert_manager:1
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift |
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
|
||
| Red Hat | Deployment Validation Operator |
cpe:/a:redhat:deployment_validator_operator
|
||
| Red Hat | External Secrets Operator for Red Hat OpenShift |
cpe:/a:redhat:external_secrets_operator:1
|
||
| Red Hat | Fence Agents Remediation Operator |
cpe:/a:redhat:workload_availability_far:0
|
||
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1
|
||
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3
|
||
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4
|
||
| Red Hat | Machine Deletion Remediation Operator |
cpe:/a:redhat:workload_availability_mdr:0
|
||
| Red Hat | mirror registry for Red Hat OpenShift |
cpe:/a:redhat:mirror_registry:1
|
||
| Red Hat | mirror registry for Red Hat OpenShift 2 |
cpe:/a:redhat:mirror_registry:2
|
||
| Red Hat | Multiarch Tuning Operator |
cpe:/a:redhat:multiarch_tuning_operator
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | Multicluster Global Hub |
cpe:/a:redhat:multicluster_globalhub
|
||
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1
|
||
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0
|
||
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools
|
||
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2
|
||
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3
|
||
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring
|
||
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2
|
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2
|
||
| Red Hat | Red Hat AMQ Clients |
cpe:/a:redhat:amq_clients:2023
|
||
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2
|
||
| Red Hat | Red Hat build of Apicurio Registry 2 |
cpe:/a:redhat:service_registry:2
|
||
| Red Hat | Red Hat Ceph Storage 5 |
cpe:/a:redhat:ceph_storage:5
|
||
| Red Hat | Red Hat Ceph Storage 6 |
cpe:/a:redhat:ceph_storage:6
|
||
| Red Hat | Red Hat Ceph Storage 9 |
cpe:/a:redhat:ceph_storage:9
|
||
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 |
cpe:/a:redhat:certifications:9
|
||
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7
|
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4
|
||
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3
|
||
| Red Hat | Red Hat OpenShift Dev Workspaces Operator |
cpe:/a:redhat:devworkspace
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2
|
||
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3
|
||
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6
|
||
| Red Hat | Red Hat Service Interconnect 1 |
cpe:/a:redhat:service_interconnect:1
|
||
| Red Hat | Red Hat Service Interconnect 2 |
cpe:/a:redhat:service_interconnect:2
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Service Telemetry Framework 1.5 |
cpe:/a:redhat:stf:1.5
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-33811",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-08T14:25:39.702568Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-08T14:25:43.896Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.2.0-19",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.10-7.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.17-2.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el10"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el10ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.17-2.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-openprinting-ipp-usb",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.9.27-7.el10_2.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.7.1-5.el10_2.6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.9.2-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.10-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.7-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.3-6.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-script",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.11-1.el7_9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.5-8.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260709093628.afee755d",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.4.1-12.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "oci-seccomp-bpf-hook",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.2.11-2.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.7.1-4.el9_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "cri-tools",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.32.0-6.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "ose-aws-ecr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "collectd-sensubility",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.1-1.1.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.23-22.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github-openstack-k8s-operators-os-diff",
"product": "Red Hat OpenStack Services on OpenShift 18.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.1.1-18.0.20260602234716.a95ae05.el9ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el8"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el8sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.18 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.19 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.0 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el10em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github",
"product": "Streams for Apache Kafka 3.2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "danielqsj-kafka_exporter",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "Compliance Operator 1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786380082",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging for Red Hat OpenShift 6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785418851",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging for Red Hat OpenShift 6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782408807",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784747813",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.5::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786645248",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784915379",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/addon-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911941",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/backplane-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911945",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911975",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786912006",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911973",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/multicloud-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911950",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/placement-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-operator-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/work-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786907276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783985999",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784306906",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.5.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127491",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.7.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784768332",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1785775948",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785180878",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784058822",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:source_to_image:1.6::el8"
],
"defaultStatus": "affected",
"packageName": "source-to-image/source-to-image-rhel8",
"product": "OpenShift Developer Tools and Services 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784727697",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:source_to_image:1.6::el8"
],
"defaultStatus": "affected",
"packageName": "source-to-image/source-to-image-rhel9",
"product": "OpenShift Developer Tools and Services 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784728036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/klusterlet-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786908301",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783357116",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783357140",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.11::el9"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel9",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783352589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/receptor-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783962464",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782767215",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502438",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194574",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127736",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-25-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.25.11-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-26-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.26.4-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
"product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786483782",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-registry-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783914276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
],
"defaultStatus": "affected",
"packageName": "mta/mta-cli-rhel9",
"product": "Red Hat Migration Toolkit for Applications 8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785171639",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
],
"defaultStatus": "affected",
"packageName": "mta/mta-cli-rhel9",
"product": "Red Hat Migration Toolkit for Applications 8.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784211378",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784061472",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784152046",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kueue-controller-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783544461",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-training-operator-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783946386",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.7.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057868",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786490745",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786525840",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786573075",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786526139",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-rhel9-operator",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785704547",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782292352",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel9",
"product": "Red Hat OpenShift GitOps 1.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782383826",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel9",
"product": "Red Hat OpenShift GitOps 1.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782910941",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222217",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782223341",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782296193",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222607",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222163",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782223138",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222394",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222451",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782226178",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782224487",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782303211",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782224541",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782223045",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222366",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782310747",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222038",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0.12::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785202723",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_snr:0.13::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/self-node-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_sbr:0.3::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/storage-based-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203474",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0.7::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203508",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0.8::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203079",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_nmo:5.7::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-maintenance-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 5.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785202847",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785923308",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785929994",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "conforma-cli-stack-v1",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.2",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296203",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784247610",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.13::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296127",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.14::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.15::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296033",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.16::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784295767",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "build-of-trustee/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "confidential-compute-attestation-tech-preview/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:deployment_validator_operator"
],
"defaultStatus": "affected",
"packageName": "dvo/deployment-validation-rhel8-operator",
"product": "Deployment Validation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "affected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "affected",
"packageName": "redhat-user-workloads/far-operator-0-8",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "affected",
"packageName": "gatekeeper/gatekeeper-rhel9-operator",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/lvms-rhel9-operator",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/topolvm-rhel8",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0"
],
"defaultStatus": "affected",
"packageName": "redhat-user-workloads/mdr-operator-0-7",
"product": "Machine Deletion Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:1"
],
"defaultStatus": "affected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multiarch_tuning_operator"
],
"defaultStatus": "affected",
"packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
"product": "Multiarch Tuning Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/maestro-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel8",
"product": "Multicluster Global Hub",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-cli-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "redhat-user-workloads/nhc-operator-0-12",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "helm",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "kn-workflow-plugin",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-clients",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-golang-builder-container",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "affected",
"packageName": "openshift-power-monitoring/kepler-rhel9",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/3scale-rhel7-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/3scale-rhel9-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/config-policy-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/governance-policy-propagator-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/subctl-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_clients:2023"
],
"defaultStatus": "unaffected",
"packageName": "python39-qpid-proton",
"product": "Red Hat AMQ Clients",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_clients:2023"
],
"defaultStatus": "unaffected",
"packageName": "qpid-proton",
"product": "Red Hat AMQ Clients",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform/platform-operator-bundle",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl30",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl32",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_registry:2"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-rhel8-operator",
"product": "Red Hat build of Apicurio Registry 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_registry:2"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-rhel9-operator",
"product": "Red Hat build of Apicurio Registry 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:5"
],
"defaultStatus": "affected",
"packageName": "rhceph/snmp-notifier-rhel8",
"product": "Red Hat Ceph Storage 5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
],
"defaultStatus": "affected",
"packageName": "rhceph/snmp-notifier-rhel9",
"product": "Red Hat Ceph Storage 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
],
"defaultStatus": "affected",
"packageName": "rhceph/alloy-rhel10",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:certifications:9"
],
"defaultStatus": "affected",
"packageName": "redhat-certification-preflight",
"product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/rhcl-operator-bundle",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "go-fdo-client",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "go-fdo-server",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "gpsd",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "oci-seccomp-bpf-hook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "trustee",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-package-manager",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "host-metering",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "go-toolset:rhel8/golang",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "gpsd-minimal",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "runc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-codeflare-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-feast-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kf-notebook-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kube-auth-proxy-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-maas-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mm-rest-proxy-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-serving-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-notebook-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-rhel8-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhel9-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trainer-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trustyai-service-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/rhai-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon-rs",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-prometheus-promu",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "kata-containers",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/frr-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-node",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel7",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift-golang-builder-container",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ose-gcp-gcr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "runc",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "ocs4/cephcsi-rhel8",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "odf4/cephcsi-rhel8",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"packageName": "devspaces/udi-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:devworkspace"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "Red Hat OpenShift Dev Workspaces Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-api-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "openshift-golang-builder-container",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "golang-qpid-apache",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "qpid-proton",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "rhosp-rhel8/osp-director-agent",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "collectd-libpod-stats",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "golang-qpid-apache",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "qpid-proton",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "rhosp-rhel9/osp-director-agent",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"packageName": "rhoso-operators/sg-core-rhel9",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite:el8/yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "affected",
"packageName": "qpid-proton",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "affected",
"packageName": "qpid-proton",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "affected",
"packageName": "skupper-router",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-selinuxd-rhel8",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:stf:1.5"
],
"defaultStatus": "affected",
"packageName": "stf/sg-core-rhel9",
"product": "Service Telemetry Framework 1.5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-05-07T19:41:19.285Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1341",
"description": "Multiple Releases of Same Resource or Handle",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-24T12:06:50.538Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"name": "RHBZ#2467822",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54191"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54552"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42082"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50336"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42150"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42240"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53413"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54168"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51187"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39272"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35832"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34357"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39573"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:38504"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39266"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36776"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53412"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53415"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36617"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34359"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54500"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34364"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56340"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53530"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57191"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42132"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23264"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50300"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42644"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54556"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54603"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54602"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54584"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35994"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35995"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35993"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33120"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33123"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33142"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33150"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51341"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42048"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
},
{
"lang": "en",
"value": "RHSA-2026:54552: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:50336: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0"
},
{
"lang": "en",
"value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:39272: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:38504: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:39266: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:36776: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:39319: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:36617: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:54500: Compliance Operator 1"
},
{
"lang": "en",
"value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"lang": "en",
"value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"lang": "en",
"value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
},
{
"lang": "en",
"value": "RHSA-2026:42852: Multicluster Global Hub 1.5.6"
},
{
"lang": "en",
"value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
},
{
"lang": "en",
"value": "RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16"
},
{
"lang": "en",
"value": "RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"lang": "en",
"value": "RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:23262: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:23264: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
},
{
"lang": "en",
"value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit for Containers 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
},
{
"lang": "en",
"value": "RHSA-2026:54556: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:54584: Red Hat OpenShift Container Platform 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:35994: Red Hat OpenShift GitOps 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:35995: Red Hat OpenShift GitOps 1.21"
},
{
"lang": "en",
"value": "RHSA-2026:35993: Red Hat OpenShift GitOps 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
},
{
"lang": "en",
"value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
},
{
"lang": "en",
"value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
},
{
"lang": "en",
"value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
},
{
"lang": "en",
"value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
},
{
"lang": "en",
"value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
},
{
"lang": "en",
"value": "RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.1"
},
{
"lang": "en",
"value": "RHSA-2026:51341: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:51194: Red Hat Satellite 6.19"
},
{
"lang": "en",
"value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:42048: Red Hat Web Terminal 1.16"
},
{
"lang": "en",
"value": "RHSA-2026:41030: Red Hat multicluster global hub 1.4.2"
},
{
"lang": "en",
"value": "RHSA-2026:44622: Red Hat multicluster global hub 1.6.0"
},
{
"lang": "en",
"value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
},
{
"lang": "en",
"value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-07T20:01:34.913Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-07T19:41:19.285Z",
"value": "Made public."
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"workarounds": [
{
"lang": "en",
"value": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "net",
"product": "net",
"programRoutines": [
{
"name": "cgoResSearch"
},
{
"name": "LookupCNAME"
},
{
"name": "Resolver.LookupCNAME"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.25.10",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "1.26.3",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "hamayanhamayan"
}
],
"descriptions": [
{
"lang": "en",
"value": "When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-415: Double Free",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-07T19:41:19.285Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/issue/78803"
},
{
"url": "https://go.dev/cl/767860"
},
{
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"title": "Crash when handling long CNAME response in net"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-33811",
"datePublished": "2026-05-07T19:41:19.285Z",
"dateReserved": "2026-03-23T20:35:32.814Z",
"dateUpdated": "2026-08-24T12:06:50.538Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-33811",
"date": "2026-08-24",
"epss": "0.00813",
"percentile": "0.54243"
},
"microsoft_vex": {
"current_release_date": "2026-06-09T01:42:02.000Z",
"cve": "CVE-2026-33811",
"id": "msrc_CVE-2026-33811",
"initial_release_date": "2026-05-02T00:00:00.000Z",
"product_status:known_affected": "2",
"product_status:known_not_affected": "4",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Crash when handling long CNAME response in net",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-33811.json",
"version": "6"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-33811\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-05-07T20:16:42.770\",\"lastModified\":\"2026-08-24T13:18:11.860\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"net\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"net\",\"programRoutines\":[{\"name\":\"cgoResSearch\"},{\"name\":\"LookupCNAME\"},{\"name\":\"Resolver.LookupCNAME\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.25.10\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.3\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.2.0-19\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:1.6.6-1.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:2.5.10-7.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:2.6.17-2.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"],\"versions\":[{\"version\":\"0:1.6.6-1.el10ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:2.6.17-2.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang-github-openprinting-ipp-usb\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.9.27-7.el10_2.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:3.7.1-5.el10_2.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.4.9.2-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.2.10-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.26.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.4.7-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.2.3-6.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-script\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:0.11-1.el7_9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"1:0.2.5-8.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260709093628.afee755d\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:3.4.1-12.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oci-seccomp-bpf-hook\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:1.2.11-2.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:3.7.1-4.el9_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cri-tools\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:1.32.0-6.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ose-aws-ecr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"collectd-sensubility\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:0.2.1-1.1.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:3.3.23-22.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Services on OpenShift 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-openstack-k8s-operators-os-diff\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0::el9\"],\"versions\":[{\"version\":\"0:0.1.1-18.0.20260602234716.a95ae05.el9ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el8\"],\"versions\":[{\"version\":\"0:0.0.4-1.el8sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.17 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.17::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.0 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"0:1.0.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"0:1.1.3-1.el10em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"0:1.1.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Streams for Apache Kafka 3.2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3.2::el9\"],\"versions\":[{\"version\":\"danielqsj-kafka_exporter\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Compliance Operator 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"],\"versions\":[{\"version\":\"1786380082\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1785418851\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"],\"versions\":[{\"version\":\"1782408807\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.2::el9\"],\"versions\":[{\"version\":\"1784747813\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.5::el9\"],\"versions\":[{\"version\":\"1786645248\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1784915379\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/addon-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911941\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/backplane-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterlifecycle-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911975\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786912006\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/managedcluster-import-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911973\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/multicloud-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911950\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/placement-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/work-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786907276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1783985999\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784306906\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.5.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"],\"versions\":[{\"version\":\"1784127491\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.7.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"],\"versions\":[{\"version\":\"1784768332\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1785775948\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"],\"versions\":[{\"version\":\"1785180878\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"],\"versions\":[{\"version\":\"1784058822\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"source-to-image/source-to-image-rhel8\",\"cpes\":[\"cpe:/a:redhat:source_to_image:1.6::el8\"],\"versions\":[{\"version\":\"1784727697\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"source-to-image/source-to-image-rhel9\",\"cpes\":[\"cpe:/a:redhat:source_to_image:1.6::el8\"],\"versions\":[{\"version\":\"1784728036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/klusterlet-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1786908301\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1783357116\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1783357140\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"],\"versions\":[{\"version\":\"1783352589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/receptor-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1783962464\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1782767215\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502438\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194574\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127736\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-25-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.25.11-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-26-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.26.4-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"],\"versions\":[{\"version\":\"1786483782\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhmtc/openshift-migration-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783914276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit for Applications 8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8.1::el9\"],\"versions\":[{\"version\":\"1785171639\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit for Applications 8.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8.2::el9\"],\"versions\":[{\"version\":\"1784211378\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1784061472\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1784152046\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-kueue-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1783544461\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-training-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1783946386\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057868\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1786490745\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1786525840\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1786573075\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1786526139\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1785704547\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.19::el8\"],\"versions\":[{\"version\":\"1782292352\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.20::el9\"],\"versions\":[{\"version\":\"1782383826\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.21::el9\"],\"versions\":[{\"version\":\"1782910941\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782222217\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782223341\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782296193\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782222607\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782222163\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782223138\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782222394\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782222451\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782226178\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782224487\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782303211\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782224541\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782223045\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782222366\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782310747\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782222038\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/node-healthcheck-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0.12::el9\"],\"versions\":[{\"version\":\"1785202723\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/self-node-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_snr:0.13::el9\"],\"versions\":[{\"version\":\"1785203036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/storage-based-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_sbr:0.3::el9\"],\"versions\":[{\"version\":\"1785203474\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/machine-deletion-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0.7::el9\"],\"versions\":[{\"version\":\"1785203508\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/fence-agents-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0.8::el9\"],\"versions\":[{\"version\":\"1785203079\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 5.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/node-maintenance-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nmo:5.7::el9\"],\"versions\":[{\"version\":\"1785202847\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"1785923308\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"1785929994\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conforma-cli-stack-v1\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"4-1.4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"4-1.4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.11::el9\"],\"versions\":[{\"version\":\"1784296203\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.12::el9\"],\"versions\":[{\"version\":\"1784247610\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.13::el9\"],\"versions\":[{\"version\":\"1784296127\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.14::el9\"],\"versions\":[{\"version\":\"1784296114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.15::el9\"],\"versions\":[{\"version\":\"1784296033\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.16::el9\"],\"versions\":[{\"version\":\"1784295767\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"build-of-trustee/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"confidential-compute-attestation-tech-preview/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Deployment Validation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dvo/deployment-validation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:deployment_validator_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-user-workloads/far-operator-0-8\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel8\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Machine Deletion Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-user-workloads/mdr-operator-0-7\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multiarch Tuning Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multiarch-tuning/multiarch-tuning-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multiarch_tuning_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/maestro-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-user-workloads/nhc-operator-0-12\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"helm\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kn-workflow-plugin\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-event-sender-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-clients\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/kepler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel7-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-framework-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/config-policy-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/governance-policy-propagator-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/subctl-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Clients\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python39-qpid-proton\",\"cpes\":[\"cpe:/a:redhat:amq_clients:2023\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Clients\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:amq_clients:2023\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/platform-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl30\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl32\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:service_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/snmp-notifier-rhel8\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/snmp-notifier-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/alloy-rhel10\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Certification Program for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-certification-preflight\",\"cpes\":[\"cpe:/a:redhat:certifications:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/rhcl-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-fdo-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-fdo-server\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gpsd\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"oci-seccomp-bpf-hook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10-eus/rhel-10.0-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-package-manager\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"host-metering\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-toolset:rhel8/golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gpsd-minimal\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9-eus/rhel-9.6-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ai-gateway-payload-processing-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-codeflare-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-feast-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kf-notebook-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-llmisvc-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kube-auth-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kuberay-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llama-stack-k8s-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-apiserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-gc-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-processor-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-inference-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-routing-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-maas-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-api-server-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-launcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mm-rest-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-automl-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-autorag-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-runtime-adapter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-serving-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-serving-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-notebook-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhaii-cluster-validator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-trainer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-trustyai-service-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workload-variant-autoscaler-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/rhai-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon-rs\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-prometheus-promu\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kata-containers\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/frr-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ansible-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-node\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel7\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-gcp-gcr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocs4/cephcsi-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/udi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Workspaces Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-qpid-apache\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel8/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-libpod-stats\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-qpid-apache\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite:el8/yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qpid-proton\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-router\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-selinuxd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Service Telemetry Framework 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"stf/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:stf:1.5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-08T14:25:39.702568Z\",\"id\":\"CVE-2026-33811\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-415\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1341\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.25.10\",\"matchCriteriaId\":\"1C966EF3-C51C-4239-B5FC-C44A5202FEC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.26.0\",\"versionEndExcluding\":\"1.26.3\",\"matchCriteriaId\":\"522E4CD0-2B99-4363-9C78-0BAFD988A2D6\"}]}]}],\"references\":[{\"url\":\"https://go.dev/cl/767860\",\"source\":\"security@golang.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://go.dev/issue/78803\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\",\"source\":\"security@golang.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-4981\",\"source\":\"security@golang.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23264\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33120\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33123\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33142\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33150\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33574\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34357\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34359\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34364\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35832\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35993\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35994\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35995\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36207\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36617\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36625\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36648\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36776\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36797\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:38504\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39266\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39272\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39573\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39810\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41019\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41030\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41055\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42043\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42048\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42049\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42050\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42051\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42078\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42079\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42082\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42132\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42150\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42240\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42644\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42852\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43038\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43692\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:44622\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46885\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47149\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47735\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47952\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:48151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50205\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50300\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50336\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50843\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51033\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51057\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51187\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51341\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53412\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53413\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53415\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53530\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54168\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54191\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54274\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54283\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54284\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54285\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54286\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54287\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54435\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54441\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54500\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54552\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54556\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54584\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54602\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54603\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54757\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56340\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57191\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-33811\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2467822\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-25T05:12:55+00:00",
"cve": "CVE-2026-33811",
"id": "CVE-2026-33811",
"initial_release_date": "2026-05-07T19:41:19.285000+00:00",
"product_status:fixed": "913",
"product_status:known_affected": "194",
"product_status:known_not_affected": "4084",
"product_status:under_investigation": "5",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.2.0-19\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.10-7.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.6.17-2.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el10ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.6.17-2.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.27-7.el10_2.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openprinting-ipp-usb\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.7.1-5.el10_2.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.9.2-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.10-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.7-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.3-6.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.11-1.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-script\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.5-8.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020260709093628.afee755d\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.4.1-12.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.2.11-2.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oci-seccomp-bpf-hook\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.7.1-4.el9_8.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.32.0-6.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cri-tools\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ose-aws-ecr-image-credential-provider\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.1-1.1.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"collectd-sensubility\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.23-22.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"etcd\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Services on OpenShift 18.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.1.1-18.0.20260602234716.a95ae05.el9ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openstack-k8s-operators-os-diff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el8sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.0 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el10em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Streams for Apache Kafka 3.2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"danielqsj-kafka_exporter\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Compliance Operator 1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786380082\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785418851\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782408807\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784747813\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786645248\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784915379\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911941\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/addon-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/backplane-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterlifecycle-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911975\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786912006\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911973\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/managedcluster-import-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911950\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/multicloud-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/placement-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786907276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/work-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783985999\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784306906\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.5.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127491\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.7.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784768332\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1785775948\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785180878\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784058822\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:source_to_image:1.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784727697\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"source-to-image/source-to-image-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:source_to_image:1.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784728036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"source-to-image/source-to-image-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786908301\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/klusterlet-addon-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783357116\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783357140\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783352589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783962464\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/receptor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782767215\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502438\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194574\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127736\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.25.11-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-25-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.26.4-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-26-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786483782\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783914276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit for Applications 8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785171639\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit for Applications 8.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784211378\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784061472\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784152046\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783544461\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-kueue-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783946386\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-training-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057868\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786490745\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786525840\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786573075\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786526139\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785704547\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782292352\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782383826\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782910941\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222217\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782223341\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782296193\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222607\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222163\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782223138\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222394\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222451\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782226178\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782224487\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782303211\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782224541\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782223045\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222366\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782310747\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222038\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785202723\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/node-healthcheck-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_snr:0.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/self-node-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_sbr:0.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203474\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/storage-based-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203508\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/machine-deletion-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203079\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/fence-agents-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nmo:5.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 5.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785202847\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/node-maintenance-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785923308\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785929994\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4-1.4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"4-1.4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"conforma-cli-stack-v1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296203\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784247610\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296127\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296033\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784295767\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"build-of-trustee/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"confidential-compute-attestation-tech-preview/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-monitor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:deployment_validator_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Deployment Validation Operator\", \"packageName\": \"dvo/deployment-validation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0\"], \"vendor\": \"Red Hat\", \"product\": \"Fence Agents Remediation Operator\", \"packageName\": \"redhat-user-workloads/far-operator-0-8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0\"], \"vendor\": \"Red Hat\", \"product\": \"Machine Deletion Remediation Operator\", \"packageName\": \"redhat-user-workloads/mdr-operator-0-7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:1\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift 2\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multiarch_tuning_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Multiarch Tuning Operator\", \"packageName\": \"multiarch-tuning/multiarch-tuning-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/maestro-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub\", \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"redhat-user-workloads/nhc-operator-0-12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"helm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"kn-workflow-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-event-sender-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/kepler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel7-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-framework-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/config-policy-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/governance-policy-propagator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/subctl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_clients:2023\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Clients\", \"packageName\": \"python39-qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_clients:2023\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Clients\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/platform-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl30\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl32\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 2\", \"packageName\": \"apicurio/apicurio-registry-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 2\", \"packageName\": \"apicurio/apicurio-registry-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:5\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 5\", \"packageName\": \"rhceph/snmp-notifier-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 6\", \"packageName\": \"rhceph/snmp-notifier-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"packageName\": \"rhceph/alloy-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:certifications:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Certification Program for Red Hat Enterprise Linux 9\", \"packageName\": \"redhat-certification-preflight\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/rhcl-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"go-fdo-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"go-fdo-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gpsd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"oci-seccomp-bpf-hook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10-eus/rhel-10.0-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"yggdrasil-worker-package-manager\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"host-metering\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"go-toolset:rhel8/golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gpsd-minimal\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9-eus/rhel-9.6-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ai-gateway-payload-processing-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-codeflare-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-operator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-feast-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kf-notebook-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-llmisvc-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kube-auth-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kuberay-operator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llama-stack-k8s-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-apiserver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-gc-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-processor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-inference-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-routing-sidecar-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-maas-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-api-server-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-launcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mm-rest-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-automl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-autorag-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-runtime-adapter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-serving-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-serving-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-notebook-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhaii-cluster-validator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trainer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trustyai-service-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workload-variant-autoscaler-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/rhai-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon-rs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"golang-github-prometheus-promu\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"kata-containers\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/frr-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ansible-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-node\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-gcp-gcr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"ocs4/cephcsi-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/udi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Workspaces Operator\", \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-qpid-apache\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"rhosp-rhel8/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"collectd-libpod-stats\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-qpid-apache\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite:el8/yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 1\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 1\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"qpid-proton\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-router\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-selinuxd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5\"], \"vendor\": \"Red Hat\", \"product\": \"Service Telemetry Framework 1.5\", \"packageName\": \"stf/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-07T20:01:34.913Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-05-07T19:41:19.285Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54757: Red Hat OpenStack Platform 16.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54552: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50336: Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:48151: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36796: RHEM 1.0 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39272: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:38504: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39266: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36776: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39319: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36617: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54500: Compliance Operator 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50843: Logging for Red Hat OpenShift 6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47952: Logging for Red Hat OpenShift 6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42852: Multicluster Global Hub 1.5.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47149: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53530: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51033: OpenShift API for Data Protection 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43692: OpenShift API for Data Protection 1.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33574: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36651: Red Hat Edge Manager 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23262: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23264: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit for Containers 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42644: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54556: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54584: Red Hat OpenShift Container Platform 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35994: Red Hat OpenShift GitOps 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35995: Red Hat OpenShift GitOps 1.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35993: Red Hat OpenShift GitOps 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51341: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51194: Red Hat Satellite 6.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42043: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42047: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42050: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42051: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42049: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42048: Red Hat Web Terminal 1.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41030: Red Hat multicluster global hub 1.4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:44622: Red Hat multicluster global hub 1.6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54435: Streams for Apache Kafka 3.2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57194: multicluster engine for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46885: multicluster engine for Kubernetes 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41055: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47735: multicluster engine for Kubernetes 2.8\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-05-07T19:41:19.285Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-33811\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2467822\", \"name\": \"RHBZ#2467822\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42079\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41019\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54191\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42078\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54757\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54552\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42082\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50336\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:48151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39810\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42240\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49703\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53413\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54168\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51187\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39272\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35832\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34357\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42946\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39573\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:38504\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39266\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36776\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53412\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53415\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36617\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34359\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54500\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34364\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:56340\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50843\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47952\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42852\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47149\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53530\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51033\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43692\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51057\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57191\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36625\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36207\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42132\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33574\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23264\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54441\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50300\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43038\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42644\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36648\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54556\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54603\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54602\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54584\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35994\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35995\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35993\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33120\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33123\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54287\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54284\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54286\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54285\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54274\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54283\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50205\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51341\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36797\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42043\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42050\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42051\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42049\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42048\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41030\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:44622\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54435\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46885\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41055\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47735\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1341\", \"description\": \"Multiple Releases of Same Resource or Handle\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-24T12:06:50.538Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-33811\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-08T14:25:39.702568Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-08T14:25:36.174Z\"}}], \"cna\": {\"title\": \"Crash when handling long CNAME response in net\", \"credits\": [{\"lang\": \"en\", \"value\": \"hamayanhamayan\"}], \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"net\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.25.10\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.3\", \"versionType\": \"semver\"}], \"packageName\": \"net\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"cgoResSearch\"}, {\"name\": \"LookupCNAME\"}, {\"name\": \"Resolver.LookupCNAME\"}]}], \"references\": [{\"url\": \"https://go.dev/issue/78803\"}, {\"url\": \"https://go.dev/cl/767860\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-4981\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-415: Double Free\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-05-07T19:41:19.285Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-33811\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-24T12:06:50.538Z\", \"dateReserved\": \"2026-03-23T20:35:32.814Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-05-07T19:41:19.285Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:40119
Vulnerability from csaf_redhat - Published: 2026-07-15 16:23 - Updated: 2026-07-18 19:25Summary
Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.12 security update
Severity
Important
Notes
Topic: The multicluster engine for Kubernetes 2.6 General Availability release images,
which add new features and enhancements, bug fixes, and updated container images.
Details: The multicluster engine for Kubernetes v2.6 images
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x | — |
Workaround
|
Threats
Impact
Important
References
87 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The multicluster engine for Kubernetes 2.6 General Availability release images,\nwhich add new features and enhancements, bug fixes, and updated container images.",
"title": "Topic"
},
{
"category": "general",
"text": "The multicluster engine for Kubernetes v2.6 images\n\nThe multicluster engine for Kubernetes provides the foundational components\nthat are necessary for the centralized management of multiple\nKubernetes-based clusters across data centers, public clouds, and private\nclouds.\n\nYou can use the engine to create new Red Hat OpenShift Container Platform\nclusters or to bring existing Kubernetes-based clusters under management by\nimporting them. After the clusters are managed, you can use the APIs that\nare provided by the engine to distribute configuration based on placement\npolicy.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40119",
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40119.json"
}
],
"title": "Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.12 security update",
"tracking": {
"current_release_date": "2026-07-18T19:25:48+00:00",
"generator": {
"date": "2026-07-18T19:25:48+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:40119",
"initial_release_date": "2026-07-15T16:23:42+00:00",
"revision_history": [
{
"date": "2026-07-15T16:23:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-15T16:23:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-18T19:25:48+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "multicluster engine for Kubernetes 2.6",
"product": {
"name": "multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9"
}
}
}
],
"category": "product_family",
"name": "multicluster engine for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1782943869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1782862718"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Afee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1783619433"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Ad0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1782689861"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1782603921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1782949382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1783100921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1783381856"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1782941083"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1783640387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1783208933"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3Aa9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1783351002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3Ac9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1782916619"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1783362553"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1783025820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Adde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1782690816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3Ad82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1783264047"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1783274065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1783553942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Ae44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1783208924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1783580314"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1783468200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1782943874"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1782949383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1783260551"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1782943870"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1782943881"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1782943869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1782862718"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1783619433"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Acbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1782689861"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1782603921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Ac6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1782949382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1783100921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1783381856"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1782941083"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1783640387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Ac13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1783208933"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1783351002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3Ab674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1782916619"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1783362553"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1783025820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Aa3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1782690816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1783264047"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1783274065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Ad98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1783553942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1783208924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Acbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1783580314"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1783468200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1782943874"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1782949383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1783260551"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1782943870"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1782943881"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3Ad5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1782943869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1782862718"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1783619433"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Ade7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1782689861"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1782603921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1782949382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1783100921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1783381856"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1782941083"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1783640387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1783208933"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1783351002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1782916619"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1783362553"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1783025820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1782690816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1783264047"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1783274065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Ae3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1783553942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Ad3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1783208924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1783580314"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3Aac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1783468200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3Acfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1782943874"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Ab216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1782949383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1783260551"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Ac6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1782943870"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1782943881"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1782943869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1782862718"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Afb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1783619433"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1782689861"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1782603921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1782949382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1783100921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1783381856"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Acbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1782941083"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1783640387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1783208933"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3Aa1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1783351002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3Ad945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1782916619"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1783362553"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1783025820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Aa27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1782690816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1783264047"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1783274065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1783553942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Aef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1783208924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Aa0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1783580314"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3Aa47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1783468200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1782943874"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Ad90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1782949383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1783260551"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1782943870"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1782943881"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:23:42+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:23:42+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:23:42+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:23:42+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:23:42+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:23:42+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:23:42+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:23:42+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:23:42+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:23:42+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:23:42+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:23:42+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0164036177ee83575710859bf48b4cf0c350eeb0b77fd8d6962ffdfdb2f3a883_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:7633bda7a528047a6a0719447aaaabf1577e0dd4dbbfce851b61eba0f71bfd8b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9240f3ee3b8e357ef90f394b9deafc51a319ef35bd2603cf3d9d645ed5c0b0d1_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d5640573286b05a1df7a5f4b2b7ec0a047636b1c893e962bc322a0400dc28262_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:1039b67efe2eacd65f2216020f4397f2e10ca3ff582d7199130bf9e5c36848b6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:cbca19a94d77712d1c023c4ce427d81731220238969dbe9b67cc33ec72b1c677_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d0a6d3306113ab8f7fac3abe90174574d075a22851ca3149905bc55b2c9ee382_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:de7d3f6efa0ea061baa05953728998536c8bcf92138a5e892b8d8a2e03b8552f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:20b08fa2595fa24da1a8f1fc48f4845a1568c4a75c2091bea7b25f535e629bcd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3c14458820c30f6e869a700348a86987f90eff97fe13466cd7e93a0fa89de082_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:8688be6ad95daa68737261453695adbe733fd27a9e3056e430bd3674df4a50c4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:904b1e2cff791caf024a2d928cfa945d37c0cdd8ee4245ea3751ca00ee1895f0_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:45f483786cf1384a4cabc258d7a68a110b22350879de70ddede1fad801ae75b3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:473fc65ca4b49ea801db614d2d19be9b6dc650a68a2ca7561d3c2cc371b38d74_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:78a40143d20fcc1649995c4729d7bbcd55b754d9e70dcbaffcaad7b74006a5e7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cbe068f1100caba572cced3ff4712b7889c09d48a25fb5b95a10097e6f84498a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5602fcd2eaea9206df9d9fbf32d231b0fe0e0f5b21a445522e22518e76317956_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b674d61090864320ecaf8b3790577e71e6a00af24760deea7afcb8618f2070f8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9740d67b348c871018b0b981fa88cca725b97669dc8b3a630179f1b4a1f9698_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d945c509128e5837ea22683beb7b92050dcdab267cbb190cc326aade5374d64b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:07a807a8414adbabfdd08c6e172f3e1e6f5877166428db155b01184b9c022495_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f8518e346896af332151f597920821db27e9aee56273cd1cb79571af207b8d8_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2d38231865167e458048bd71c5c97ded7bfa809291f7fe0987cfbdf73a529259_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:644b3665ca7d1bf6a2fa9895426e4a60886b146f68f3d7f56cf84ca55aea298e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2ceca4c83a47dd173fa3798d6546438b64777755d33a7f34a45d9b6a792a3113_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a27fb4753dc39e178a4ecc73c23d91df1410a1bfee2fc4e14acaf04f778703cc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a3e90998095f7be84636a53b630e78708132d4efabbfbcd4a8fe921ad2b038f2_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dde882da08c4593d862b4f8b79524d78d77ee5e7e50f58acd56105ab4e29a58b_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:07a268cb9f92159af64713f03f9343981ade30f0005a9b57e2bacb024f577197_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4d613ef28a285eb981c905347a9f3619475beb8c7d6cc5ce392e37a22a3c76a7_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:639f1662b7c304a4a1965ad7f2f131d87b50aeaa53b84321f17889c8013db450_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8d638f49d7b88c8d105b55269e5e7c74a84b27a6f631bd92aa6f1bd32bcfcfd8_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:157051390e4d9bbd5ca2685ef3d149ba81a98365ae09bc59b759173bdd50222c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:21ed69c38f46e8dd8fa3075c7cc6f3542799fd3bde98d2139520ca1f34ddee4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:98e138ec2c50b38812259d6dc8c33055bc474eb6994042e755a5879b6bbcdd4c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:cfbd6fb37125eb34291ab7bcd35d4b6b2a20c250a63db59ddcbcb1c7c8d134e5_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:07d43d8a02c7114bd46190000d8da6173e1f50486ad9ef8441cb8b4786b6aa67_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1cb57f3136e2924a89559935e47c1a82ad01bf4609b06f20c68f3fcc13de6ad4_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:60f007e6521635b6b2d1d0c13839cb66a5a9f86e9408e602abe427984e5a78e5_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:c6cdd29352255acfc7ccc1984cea779b396827802723c54192be43954bcfbc8c_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:200457ceaee1d8491e8b8a977405e3a41c9d49374b1ffb56893548896f322175_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6317ff5ef607574e7a5874be024ed5ba96ce78a7a47df9f05300adcd1b0929ae_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:679ef39acbb59ff21410dc99ad0cfe67e54582e9368c0f992ca44b7f19865c3e_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:6e5f0329b25da95f2ca0f0f07ac384077cd0ebe6a4676a821ef3c831fcb36cf6_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
}
]
}
RHSA-2026:40945
Vulnerability from csaf_redhat - Published: 2026-07-16 10:53 - Updated: 2026-08-25 04:37Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.1.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
* Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Moderate
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A denial of service flaw has been discovered in the flatted npm library. flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
References
232 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.1.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\n* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\n* Red Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40945",
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32141",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33816",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40945.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update",
"tracking": {
"current_release_date": "2026-08-25T04:37:01+00:00",
"generator": {
"date": "2026-08-25T04:37:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:40945",
"initial_release_date": "2026-07-16T10:53:15+00:00",
"revision_history": [
{
"date": "2026-07-16T10:53:15+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T04:37:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Edge Manager 1.1",
"product": {
"name": "Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1::el10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel10@sha256%3A776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel10\u0026tag=1784194638"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel10@sha256%3A28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10\u0026tag=1784194353"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel10@sha256%3Afe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel10\u0026tag=1784196588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel10@sha256%3A307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10\u0026tag=1784195620"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel10@sha256%3A53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel10\u0026tag=1784194309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel10@sha256%3A9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10\u0026tag=1784194144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel10@sha256%3A1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10\u0026tag=1784194188"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel10@sha256%3Aff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel10\u0026tag=1784194653"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel10@sha256%3Ad788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel10\u0026tag=1784194144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel10@sha256%3A6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10\u0026tag=1784194980"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel10@sha256%3A15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel10\u0026tag=1784194938"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel10@sha256%3A722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel10\u0026tag=1784194574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel10@sha256%3A0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10\u0026tag=1784194347"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel10@sha256%3Af7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel10\u0026tag=1784194971"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel10@sha256%3A46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel10\u0026tag=1784194638"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel10@sha256%3A4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10\u0026tag=1784194353"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel10@sha256%3A54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel10\u0026tag=1784196588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel10@sha256%3A8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10\u0026tag=1784195620"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel10@sha256%3Afdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel10\u0026tag=1784194309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel10@sha256%3A413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10\u0026tag=1784194144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel10@sha256%3A910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10\u0026tag=1784194188"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel10@sha256%3Ac91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel10\u0026tag=1784194653"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel10@sha256%3A3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel10\u0026tag=1784194144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel10@sha256%3A7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10\u0026tag=1784194980"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel10@sha256%3Aa2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel10\u0026tag=1784194938"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel10@sha256%3Abc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel10\u0026tag=1784194574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel10@sha256%3Ac1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10\u0026tag=1784194347"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel10@sha256%3A464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel10\u0026tag=1784194971"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-32141",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T19:01:30.987208+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447083"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the flatted npm library. flatted\u0027s parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: flatted: Unbounded recursion DoS in parse() revive phase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "RHBZ#2447083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606",
"url": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/pull/88",
"url": "https://github.com/WebReflection/flatted/pull/88"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f"
}
],
"release_date": "2026-03-12T18:08:09.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "flatted: flatted: Unbounded recursion DoS in parse() revive phase"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:41019
Vulnerability from csaf_redhat - Published: 2026-07-16 14:35 - Updated: 2026-08-25 04:41Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.1.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Security fixes:
* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
* golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)
* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)
* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)
* Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)
* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)
* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)
* gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
* Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)
* Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154)
* Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
* Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.
8.3 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
References
182 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.1.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\nRed Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\nRed Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.\n\nSecurity fixes:\n\n* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)\n* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)\n* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)\n* golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)\n* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)\n* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n* Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n* Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)\n* Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)\n* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)\n* gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n* Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)\n* Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154)\n* Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n* Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41019",
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_enterprise_linux/rhem-integrating-with-aap",
"url": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_enterprise_linux/rhem-integrating-with-aap"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_openshift_container_platform/edge-manager-install-rhem-ocp#edge-manager-verify-rhem-acm-console",
"url": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_openshift_container_platform/edge-manager-install-rhem-ocp#edge-manager-verify-rhem-acm-console"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41019.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update",
"tracking": {
"current_release_date": "2026-08-25T04:41:05+00:00",
"generator": {
"date": "2026-08-25T04:41:05+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41019",
"initial_release_date": "2026-07-16T14:35:59+00:00",
"revision_history": [
{
"date": "2026-07-16T14:35:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-16T14:35:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T04:41:05+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEM 1.1 for RHEL 10",
"product": {
"name": "RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1::el10"
}
}
},
{
"category": "product_name",
"name": "RHEM 1.1 for RHEL 9",
"product": {
"name": "RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-0:1.1.3-1.el10em.src",
"product": {
"name": "flightctl-0:1.1.3-1.el10em.src",
"product_id": "flightctl-0:1.1.3-1.el10em.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl@1.1.3-1.el10em?arch=src"
}
}
},
{
"category": "product_version",
"name": "flightctl-0:1.1.3-1.el9em.src",
"product": {
"name": "flightctl-0:1.1.3-1.el9em.src",
"product_id": "flightctl-0:1.1.3-1.el9em.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl@1.1.3-1.el9em?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-services-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-services-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"product": {
"name": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"product_id": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-selinux@1.1.3-1.el10em?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"product": {
"name": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"product_id": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-selinux@1.1.3-1.el9em?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-0:1.1.3-1.el10em.src as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src"
},
"product_reference": "flightctl-0:1.1.3-1.el10em.src",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-selinux-0:1.1.3-1.el10em.noarch as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch"
},
"product_reference": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-0:1.1.3-1.el9em.src as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src"
},
"product_reference": "flightctl-0:1.1.3-1.el9em.src",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-selinux-0:1.1.3-1.el9em.noarch as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch"
},
"product_reference": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33815",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:25.130006+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455975"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "RHBZ#2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4771",
"url": "https://pkg.go.dev/vuln/GO-2026-4771"
}
],
"release_date": "2026-04-07T15:19:24.344000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:41030
Vulnerability from csaf_redhat - Published: 2026-07-16 14:28 - Updated: 2026-08-25 04:48Summary
Red Hat Security Advisory: Multicluster Global Hub 1.4.7 security update
Severity
Important
Notes
Topic: Multicluster Global Hub v1.4.7 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Important.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the container, as the daemon incorrectly uses decompression binaries from the container's filesystem. This allows an attacker to gain complete control over the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory (path traversal), and improper neutralization of CRLF sequences in HTTP headers (HTTP request/response splitting). A remote attacker could exploit these issues to trigger uncontrolled resource consumption, leading to a Denial of Service (DoS) condition. Furthermore, path traversal could allow unauthorized access to files, and HTTP request/response splitting might enable other web-based attacks.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system's CPU is consumed indefinitely until the process is terminated.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.
8.2 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le | — |
Threats
Impact
Important
References
100 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Multicluster Global Hub v1.4.7 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41030",
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41567",
"url": "https://access.redhat.com/security/cve/CVE-2026-41567"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-43870",
"url": "https://access.redhat.com/security/cve/CVE-2026-43870"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46384",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46385",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41030.json"
}
],
"title": "Red Hat Security Advisory: Multicluster Global Hub 1.4.7 security update",
"tracking": {
"current_release_date": "2026-08-25T04:48:13+00:00",
"generator": {
"date": "2026-08-25T04:48:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41030",
"initial_release_date": "2026-07-16T14:28:53+00:00",
"revision_history": [
{
"date": "2026-07-16T14:28:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T04:48:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat multicluster global hub 1.4.2",
"product": {
"name": "Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat multicluster global hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784060681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Ac083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784061472"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aaec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784061010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3Adbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1784064050"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784060515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784061953"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784060681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Ab236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784061472"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784061010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Aa04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784060515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784061953"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Adcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784060681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784061472"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Adfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784061010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Adcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784060515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784061953"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784060681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784061472"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784061010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784060515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784061953"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64 as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x as a component of Red Hat multicluster global hub 1.4.2",
"product_id": "Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.4.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-41567",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"discovery_date": "2026-06-05T02:00:54.488930+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2485356"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the container, as the daemon incorrectly uses decompression binaries from the container\u0027s filesystem. This allows an attacker to gain complete control over the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. A flaw in Moby and Docker Engine allows for arbitrary code execution with host root privileges. This occurs when a user uploads a compressed archive to a container, as the daemon incorrectly uses decompression binaries from the container\u0027s filesystem. This could lead to a complete compromise of the host system if a malicious container image is utilized.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41567"
},
{
"category": "external",
"summary": "RHBZ#2485356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41567",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41567"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567"
},
{
"category": "external",
"summary": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r",
"url": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r"
}
],
"release_date": "2026-06-05T00:35:50.563000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "To mitigate this issue, Red Hat recommends only running containers from trusted images. Additionally, users should avoid piping compressed archives into containers created from untrusted images. For environments utilizing authorization plugins, restricting access to the `PUT /containers/{id}/archive` endpoint can further reduce exposure.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-43870",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-05T09:01:02.388589+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466671"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory (path traversal), and improper neutralization of CRLF sequences in HTTP headers (HTTP request/response splitting). A remote attacker could exploit these issues to trigger uncontrolled resource consumption, leading to a Denial of Service (DoS) condition. Furthermore, path traversal could allow unauthorized access to files, and HTTP request/response splitting might enable other web-based attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Apache Thrift allows a remote attacker to trigger a denial of service through uncontrolled resource consumption. Additionally, the vulnerability enables path traversal for unauthorized file access and HTTP request/response splitting, potentially leading to further web-based attacks in Red Hat products that integrate Apache Thrift.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43870"
},
{
"category": "external",
"summary": "RHBZ#2466671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43870"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy",
"url": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy"
}
],
"release_date": "2026-05-05T07:45:35.699000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities"
},
{
"cve": "CVE-2026-46384",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-29T21:02:03.061736+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483482"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects multiple Avro decoder code paths in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing malformed or excessively large integer values that trigger unsafe integer truncation, arithmetic overflow conditions, or invalid memory allocation operations during decoding.\n\nThe vulnerability affects both 32-bit specific integer narrowing paths and several cross-platform arithmetic overflow conditions. There is only a denial-of-service impact but not confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "RHBZ#2483482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46384"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv"
}
],
"release_date": "2026-05-29T19:58:21.535000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder"
},
{
"cve": "CVE-2026-46385",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-05-29T21:01:37.087371+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483475"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system\u0027s CPU is consumed indefinitely until the process is terminated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects Avro array and map decoding functionality in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing excessively large block-count values followed by truncated or invalid data. Because the decoder continued iterating after the underlying reader entered an error state, affected applications may consume excessive CPU resources for extended periods of time, potentially leading to denial of service.\n\nThe currently available analysis demonstrates CPU exhaustion and service disruption but does not demonstrate confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "RHBZ#2483475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46385"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w"
}
],
"release_date": "2026-05-29T19:58:59.667000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
},
{
"cve": "CVE-2026-53492",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-01T19:01:34.238078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "RHBZ#2496130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
}
],
"release_date": "2026-07-01T17:59:12.552000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:28:53+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5e37720cef2fa6b617ee4f13dd20b52ffd6ea1f40d344fbed5a9ee13062100db_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7430c54c9069fb79c4868fd138d9b32aca5c5b7bdc664b8c4867c88f368794b1_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b236a391dc18a1318246f2f2dafd51046e9775e27da59062285160182c433b37_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:c083ca3a199fb2526f8c5bd289360c564190d03bb62442b9b8ee1bbaf50b5ddb_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:46d3139333312711d3a5182fa39faa17f55ad958705d5cac251d4368c19ea10c_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7ea29573411a624258921e47724e74d5990e08961d439b570fa7e514ca1e089e_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8f60851c9d3e9cb1acd491f76b9e69ed960a0aa2aef05150db679e77041c6db0_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:dcf3c795131a0ad5d23d84cf75624bc6a218b92fc7f77d315f09abd13043af99_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:171f3dd702df169e177e19a280f7a3ac7ec39b7314803bd79e75899458537f45_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:725f309bda18524c827f0c7f62f54b0deccd6ea913f09f18ca425b8a629fc079_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:aec321001dc697520c69f4a895cf4e7f586588dc9ff4bdafee7174ec845bf981_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfcfdb1ecacd9bb6f5c869f738a72f59b29374dedfbc70a2a110b9c3ed2030d5_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:dbf88c1d7dcc954af16930554e98740784793d4147ffb249d06b79f2a7402d47_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:060d3bfc8a2c8a26e2900198c08ad7a6c7483ef97ffbae7d76d557be77aa5e1b_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:36cf715173a544f464ab1eab439d75bda3d3b02fc4d54038243edfce5b177d4a_s390x",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5207c10c701c09e2497976ba70543a66e1ec8141603cb970dfd7ec26414eab65_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f621dbba78c2f72b74a16a23f29f0630d0527737abbf7a2cf62ffdd1bab236b_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4a57e975be3e638d774e9f0e9d2608f528636185b2fbac6c08d058be74211d9f_amd64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5eb9f34c615982831061c9d24e978cd54e4fd40f34224dcad3f447003f63dfaa_arm64",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:a04a325cde0fc3eeccbdcf6e942df306865ca7ccfb734160ea06dc204d5dbc02_ppc64le",
"Red Hat multicluster global hub 1.4.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dcef91d3059252532c053a368a234c137851a89f348d37f61c85cc12ff58250b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
}
]
}
RHSA-2026:41055
Vulnerability from csaf_redhat - Published: 2026-07-16 17:40 - Updated: 2026-08-25 02:12Summary
Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.12 security update
Severity
Important
Notes
Topic: The multicluster engine for Kubernetes 2.6 General Availability release images,
which add new features and enhancements, bug fixes, and updated container images.
Details: The multicluster engine for Kubernetes v2.6 images
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x | — |
Workaround
|
Threats
Impact
Important
References
87 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The multicluster engine for Kubernetes 2.6 General Availability release images,\nwhich add new features and enhancements, bug fixes, and updated container images.",
"title": "Topic"
},
{
"category": "general",
"text": "The multicluster engine for Kubernetes v2.6 images\n\nThe multicluster engine for Kubernetes provides the foundational components\nthat are necessary for the centralized management of multiple\nKubernetes-based clusters across data centers, public clouds, and private\nclouds.\n\nYou can use the engine to create new Red Hat OpenShift Container Platform\nclusters or to bring existing Kubernetes-based clusters under management by\nimporting them. After the clusters are managed, you can use the APIs that\nare provided by the engine to distribute configuration based on placement\npolicy.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41055",
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41055.json"
}
],
"title": "Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.12 security update",
"tracking": {
"current_release_date": "2026-08-25T02:12:23+00:00",
"generator": {
"date": "2026-08-25T02:12:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41055",
"initial_release_date": "2026-07-16T17:40:04+00:00",
"revision_history": [
{
"date": "2026-07-16T17:40:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T02:12:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "multicluster engine for Kubernetes 2.6",
"product": {
"name": "multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9"
}
}
}
],
"category": "product_family",
"name": "multicluster engine for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3Ac1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1783986659"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Aa5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1783985963"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Afee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1783619433"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1783813406"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1783726694"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1782949382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1783100921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1783381856"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1783985960"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1783640387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1783208933"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3Aa9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1783351002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1783985999"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1783724179"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1783025820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1783813555"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3Ad82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1783264047"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1783274065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1783553942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Ae44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1783208924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1783580314"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1783468200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1782949383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1783260551"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1783986739"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1783986742"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3Ae0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1783986659"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1783985963"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1783619433"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Ac4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1783813406"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1783726694"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Ac6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1782949382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1783100921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1783381856"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1783985960"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1783640387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Ac13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1783208933"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1783351002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1783985999"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1783724179"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1783025820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Ac664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1783813555"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1783264047"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1783274065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Ad98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1783553942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1783208924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Acbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1783580314"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1783468200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1782949383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1783260551"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Acb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1783986739"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1783986742"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1783986659"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Ae56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1783985963"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1783619433"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1783813406"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1783726694"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1782949382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1783100921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1783381856"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ab0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1783985960"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1783640387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1783208933"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1783351002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3Af3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1783985999"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3Ad326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1783724179"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1783025820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1783813555"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1783264047"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1783274065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Ae3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1783553942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Ad3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1783208924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1783580314"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3Aac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1783468200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3Ae56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Ab216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1782949383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1783260551"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1783986739"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1783986742"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1783986659"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Ab1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1783985963"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Afb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1783619433"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Ac6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1783813406"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3Accfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1783726694"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1782949382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1783100921"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1783381856"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1783985960"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1783640387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1783208933"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3Aa1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1783351002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1783985999"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1783724179"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1783025820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1783813555"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1783264047"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1783274065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1783553942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Aef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1783208924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Aa0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1783580314"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3Aa47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1783468200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Ad90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1782949383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1783260551"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Af6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1783986739"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1783986742"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T17:40:04+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T17:40:04+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T17:40:04+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T17:40:04+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T17:40:04+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T17:40:04+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T17:40:04+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T17:40:04+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T17:40:04+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T17:40:04+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T17:40:04+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T17:40:04+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:0285559d1ba4a1006c38fd757489e78c0edacb5bc42f1037f59cce2dd6ef9e9c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1692f5d5ec43b8c908243ac6f8628d17341933f25e1e5a53f5c279a2d93e97d6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c1d92a020bae5c00e04604f0ca6bb3f7d327410799c1332e9fae7786bdf1fb29_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e0abbf7070dc25c3e7ea111d3672bb2575db543c39809eb30516a5dad9ef4777_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:21dcac3a8dcfb4dff05ff5273153795dab78538d9bb0fbb409ec0cae27ec5ed1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:691f27b75bd9a8c7882a458e309b67bd3389b5fda5f0fc033a7a0d1862ceaeef_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fb99b59a92ca15d1d3d9b3118798400aa1a03ee2a5acb0d12514d24f4219e342_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:fee47818a0519d73c949c6c9a6bcfda18efb6471931a38d64fecb082473eed02_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:48ab4b1d5decfa1b2dfd24632d6e175c090372469ad31db1eeecbd96532005ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:631dcfe7186760eb5120d7e45e5ff0835d3b42af5d16aaec1314aa5e35682cfe_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c4a63170383e42285bdc7a6018714c30553887897af4cbfb8ba9894a0da0e04c_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c6f49643d6e7d962af0a57505daa1b7e2be10c7dad88ff133f46852e1649b206_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:374a9ba07f1330bda74da5b12e898c167d7d91f8513fed48e6286ae497b39acb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3a8c46f8a3e3cc59760fb60671df3b79e9b70a04a8f3c742134ea1108b502ca9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4f87f731fb1b6b67c8c97c5f434ce9ccd6da12692705d652370db53cecc746bf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:ccfcaadaf026f1642b7a881f311fb4f55a1abc09ff4e6e2b015349f20cce3df9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:05d778ebb19276e2dbb39c22fb34415aec928acc87959758d7067da96cd00b24_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0d1350e34aaa7e96877d25666ea0f22362723bd8c68984d65b980fc39de43066_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:83c51872c53043658a1e64c98a77604b74c0f7e0cb0a6f54f71424fc315a3219_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c6b986d9e03fd12126d194c2ddcc13a6fa98f0789c28dfd0304650f0209cf26a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:154459e62ea84d004652587a03ecb71adea0918bfa044646b0fd3e82003fab83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:161d457e3aed4437e37aa7cfd96f077b7999f591f934fc9850c3b1554de74285_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:25c7116334e181740640abc5babf13fc809ae9932fa8d8a2b2354374972321c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:3d89333e086b36d069ab8581db64724386cc412bdf15153f3ae0b26ef00ed572_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:1e24fd0382dd41b7226d70f43a4f206b0fcf58d5ba809e7256c9eff8a9d9be23_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c690ad55f18a59ae38e5f59578069a12b0d59112b765170a6ea48052e622109_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5afad0562224eb2846f0e3ba109e5e266739a7f33d24950857cff4f2fe672537_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8ae5f450e45b8711935e2e300e74274d48ba013621dcd1ce37145481ed5f132b_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7255ba328e0588c7bee888a5c4d0bc5bcd8685a909f20ddf7aaae9439661513e_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:74c9880bde315f89e15b8f67c43cc896b528af5a53c5dff827402b468761436e_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8eed115d863e46cb346e824d2e86f2ce62ab29b249a39dbdd97992392e427526_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0b64d9752e0a101c1b627241efd8e6b0c7842c53fa1dec7df00b95303af6d30_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0bd69cff49f78bbb5cdd015771aff766b243451bccba6ffa86c726cb0c32c181_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3186382b3e685d21864153e88112de2e691f7ba6f270a0043478f62da6d47ae6_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:512e892967bbcaa3fcb2b53dd1f1b9513eaac487dfdcab738274fdc491ab4ede_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:527067f55c6242b525f3a335eec48cfad2f39d6d2c6297efa9e5e1e139eabd95_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:0a4149d138c852a8cdf46fc7b82d472291086058e3d2dc996f17c2d1c2e0d751_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:534372f41cf8b58cc524e8b3cecee0cf4f6e6021b5cddaaa1a1ba8dc9b436edb_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:98360257f58b5bd2e63310a5f98ef64baca6d9913d97b7ae558f739c353bcf42_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c13fe1a7c386f937631c59b439526057eaad4265eda6af4b559345dd287292c5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0f08b9148127ad990947ed13c6f59f0faf85af22a7222e73b0487258da66924a_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:70cf6698fb7fa39633b0b0af65f3d6842f6724c369012fb0892bdf1f8e3e9ff4_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a1a8bf304d2174008224b85b40e286764d0f4f7cc9741c22ad5d7bda4d479256_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a9637e6cc4e1e2507dcfd7a784a23e98afef6914bb1d1651cb99a3cb50bb3ee6_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3e4ffa33d196b115bc3fa951e38b0845e20069e92968db690aab0e46e6d8c567_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6875ede77002b73c1de0edb333c451d3ec7420141eb694f63b81b084479fb27c_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9bbcbe120caa1a6c2a9f5bd18d724fb33c1d1e9c72459678a362e9627d2fffd5_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f3c91f4af3b80586fa27fb4fc3a53437e0eacb536a1d6f1e779c86fd9cb358fd_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:860306b0057d3fbeeeb693c805c875a6552ef559b7b5f67ea2e6eb6efe6191f3_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:924f6546c0e0a6456498f2caa7cf8511e9dedeb9466de09397d011f4a17b5fdb_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:9e5ba5bdfdd1baf9220bf425d9e15bc1254cfaf28c70a25783f246545678b7f3_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d326ecc4805ab14bd9e72a4852ab99279fc41fe64e3043d0378402ed75367526_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0c01c55d8b115ccb92d552ff24c9cec10dec93790c04e83bc4f99d85888a2d82_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:35004e44668a3cae47d610c927508ac0b07ddc83fecaa522a832ec51bac0eb97_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4b164c59bcdd6650dfbc7b3490efc2ca4de6e0a9963705ba8ca2ccd37b6e37e4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:72c75b941ad845b8db19a94a63b99188eb91cf54ee4ee951996c0a2b42f5b817_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:45631422d7c8cec2548691e03273c1cc17be31ce3e309f4a3e92a88627161c05_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:49fd34380edd560729f60de150a77ca057828362dcad3bddc94541024feab78f_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9713a84a2cb9626e210b58dbbf8bd31ce64fdaccb2d7e6c57d9b701ac8d339e0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c664ea7b1fffd20b8adb751414d71e8f7a4434a2c52cdd12359e6435bf7d7931_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:097a26b48563b7df155693f1457c82226efb0b070889706438a97917e9a308dc_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:0eebc62cac539f3adde808bf52ddea4ee8f58048d63cf3322e402d29b3539c94_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:330dc3db5db125582456f7eb70dfebda7da38bd1e988d4da0675b3a6d4979caf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:d82eea4b202fcb5b1d7637def328ae8749412ba4925e59a152c6a2706bb181bf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:361649aefdc5593490736059df5fca291dbed8f5ebb1c24aa395efa9779d3b8d_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4e9028f17bac398a71fe2a4609d7b5a0f708210cf350d2be82a31db969a5bcc4_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5c8f6aeb5beaa84092fe11f85e4caf4486e23d6d22b8ae57ed1fa48b3af01dd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:70f0d0285d1b5a2ebd28a93ce0c859d16e8c39b9d01309de249c2d0a7bbeeda9_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:959f9e20599805d71a3b980fce441750cbe2ad10829a2f5459bee03155a2e9f1_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a7eab8473bda04d520eab80329204581f4f8896b5fd681f71c395de0941c5f6_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d98e6a16f98ca7fcb9aab31e2dc130c01f74fe1f223e6940f492e64165f043c6_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e3ec27ecc994ead6f75047c21a06431ef030b6d005a3a814f7a4d6350a2b17ea_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e249a648fd229cac201656e5a7b61ade7df9e9cb141e931efe7747f468031b9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:d3c81122b14b690662e74af309a70eed243e80e1d26df52b10efb5a27c08e872_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:e44b43952ce3df0a1af445830c7db8139b84462fb9fd3fbe887c2bf00b0da407_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:ef270db82b5d98f3f78d21a6ac5955d31a1d2751a5bf178e3270122f0abd4a4f_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:412b5d90d5c77ea470ee2f0056724671e1e4d933d921ade603a1a68d06ea9e5c_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:70177bae722983e5d0b761bffdc00bc05ad0b89e5b81c953a499f8466c1eb8f1_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a0df3fd06e245af4beb3f1b363388c91b4d9a1adb09b3dff6c4ed5ffb3c763d7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:cbb439ee0448f7603ba6082528f3f7b7f627d3fa181fe05d536a3693c8027396_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:162946d5999db7d46578a6a63f1b37bfea7a82ed4aac8e916f66204e83281d9b_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:48db901fa49d4ebc02e2c1d7c4599693fed7a08ab64ddb72b688192c771d4780_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47e3e077465dd3f6fdb745f526eeb6c9e66a2207450c3696867b6abe514b15a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ac6b0c42cfbcc2a3debe7d6684ba353e5cf0414d1e231a4114627ef24eeb3990_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4b77fcf80e934d3cfd3e77abc8b3f9cf26b0c8489f3777c2ddda4432e244ddd0_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a5a7a139ffc7b536cc8b685dc01f4cb43da8d5cbab1e6bdddbbbecb54d0007ac_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b1b1b70475e1715bb831c30f0250d70da68ae196fa1c43e290df1bc8f95b1305_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e56a59536900a5c636b3d632bba9fff4fdc695d546fe5e216792858cc8541dee_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:416203808331128fc2eae1b1fde434c6572142f51e5c7c24291853daee71a998_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4f3ca3da54189a1bc619c522ce0ff56c235c78db5ad0d2978a40e07f3620dcfb_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:71313a27cb8fc64c1a62873c220be1c4c6bb669e8ed204d344abae9d3259658f_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e56037bb02ea01aec61918e9b9b75ad7797d59902c1aa90bc0301cb2e0ff270b_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0b5dad47f8d3278e5c4aa879af64b08549ca52c0e9f18f3a0dac274c8a7cea90_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:135f837dd9b57c83213d7e7e2a03d3912294b563c59872575fba08897d0f9faf_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b216b579c1acc7c9ead1b32fad89cfb412ea80ebd66981089e5f12af4557d0ae_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d90aa1250021956199b2cfc7790eac20b4bda5a67798011bef1d835e5008557a_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:15b5719bbb447514a21a416756ce0dc27dbf3193ca381a0ab8c545c678a0e3dd_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:834b88e3b40f5e3e8604e5aaf3c4777198e08a7acb703d0b4903acd8cc5748cf_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb03a28a394d47fb00f0f85fc3ce9f099ec3a6f18bd7592979188469b96ad990_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f1ebedeed65c341377eb5ca58ff45e72ab4def73b526eeaafd48feff599561_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0873b4d6b2265fe1ab232b3e906e9883d1af409fc16a458422ed32b59684ca7a_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:121f7732ad017daf7c6f4f27096b606320552cf6264711a46ef1e1d72a31cfec_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:540462e6fcf1b5aa3e0b1ead9a00f184362b1879fb4a0261db236d5a5921c3e3_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:67410304126e14cc7805d13585eff41beb9722554e60ca1da3b927f268654137_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0b4095759c8eeca8bbe16313603ae4f19444b7ad745fe6fc413e7cb082019f1a_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2345acd5cd978b7cf466100eaabe32565df959c473c2aa14f2a8113685396a63_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:58919a9c8fa42ff4c2e88fa9ff255648beb77e2700441f796580cc5bf9cabe65_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:896a6dfa150a5163903f02da14b38811c7ae353b71b52cd02f3aa2cfcacd7982_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
}
]
}
RHSA-2026:41928
Vulnerability from csaf_redhat - Published: 2026-07-20 08:34 - Updated: 2026-08-25 04:37Summary
Red Hat Security Advisory: Red Hat Migration Toolkit for Containers
Severity
Important
Notes
Topic: A new version of Migration Toolkit for Containers (MTC) is now available.
Details: The Migration Toolkit for Containers (MTC) enables you to migrate
Kubernetes resources, persistent volume data, and internal container images
between OpenShift Container Platform clusters, using the MTC web console or
the Kubernetes API.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data. This presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.
5.4 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response. This path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: 'stream'.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Moderate
A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server's memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.
6.8 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as '/', and enables WebSocket (ws: true) forwarding, the development server's own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser's cookies and Origin header to the proxy target, bypassing the server's Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.
7.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
References
448 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of Migration Toolkit for Containers (MTC) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The Migration Toolkit for Containers (MTC) enables you to migrate\nKubernetes resources, persistent volume data, and internal container images\nbetween OpenShift Container Platform clusters, using the MTC web console or\nthe Kubernetes API.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41928",
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-52881",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58754",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66418",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66471",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66506",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69223",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69227",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69228",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-7783",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-21441",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23490",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23745",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9595",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41928.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Migration Toolkit for Containers",
"tracking": {
"current_release_date": "2026-08-25T04:37:04+00:00",
"generator": {
"date": "2026-08-25T04:37:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41928",
"initial_release_date": "2026-07-20T08:34:29+00:00",
"revision_history": [
{
"date": "2026-07-20T08:34:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T04:37:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Migration Toolkit for Containers 1.8",
"product": {
"name": "Red Hat Migration Toolkit for Containers 1.8",
"product_id": "Red Hat Migration Toolkit for Containers 1.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhmt:1.8::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Migration Toolkit for Containers"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-controller-rhel8@sha256%3Ac6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-controller-rhel8\u0026tag=1783953372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-hook-runner-rhel8@sha256%3A02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8\u0026tag=1783931722"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-log-reader-rhel8@sha256%3Aa95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8\u0026tag=1783914253"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-must-gather-rhel8@sha256%3A7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8\u0026tag=1783914261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-openvpn-rhel8@sha256%3Af7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8\u0026tag=1783914237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rhel8-operator@sha256%3A351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rhel8-operator\u0026tag=1783969382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-operator-bundle@sha256%3A7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-operator-bundle\u0026tag=1783969793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-registry-rhel8@sha256%3A69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-registry-rhel8\u0026tag=1783914276"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rsync-transfer-rhel8@sha256%3A5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8\u0026tag=1783914257"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-ui-rhel8@sha256%3Ad2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-ui-rhel8\u0026tag=1783690532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-velero-plugin-for-mtc-rhel8@sha256%3Aee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8\u0026tag=1783914255"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 as a component of Red Hat Migration Toolkit for Containers 1.8",
"product_id": "Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Containers 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 as a component of Red Hat Migration Toolkit for Containers 1.8",
"product_id": "Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Containers 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 as a component of Red Hat Migration Toolkit for Containers 1.8",
"product_id": "Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Containers 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 as a component of Red Hat Migration Toolkit for Containers 1.8",
"product_id": "Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Containers 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 as a component of Red Hat Migration Toolkit for Containers 1.8",
"product_id": "Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Containers 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 as a component of Red Hat Migration Toolkit for Containers 1.8",
"product_id": "Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Containers 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 as a component of Red Hat Migration Toolkit for Containers 1.8",
"product_id": "Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Containers 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 as a component of Red Hat Migration Toolkit for Containers 1.8",
"product_id": "Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Containers 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 as a component of Red Hat Migration Toolkit for Containers 1.8",
"product_id": "Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Containers 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 as a component of Red Hat Migration Toolkit for Containers 1.8",
"product_id": "Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Containers 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 as a component of Red Hat Migration Toolkit for Containers 1.8",
"product_id": "Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit for Containers 1.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-7783",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2025-07-18T17:00:43.396637+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2381959"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data.\n\nThis presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: Unsafe random function in form-data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw does not affect host systems. The impact of this vulnerability is limited to specific applications which integrate the `form-data` library. As a result the impact of this CVE is limited on RedHat systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "RHBZ#2381959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2381959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-7783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0",
"url": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4"
}
],
"release_date": "2025-07-18T16:34:44.889000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "form-data: Unsafe random function in form-data"
},
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-52881",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2025-10-17T14:19:18.652000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2404715"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat considers this as an Important flaw since the impact is limited to local attack with minimal privileges in order to jeopardize the environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "RHBZ#2404715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-52881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm",
"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/selinux/pull/237",
"url": "https://github.com/opencontainers/selinux/pull/237"
}
],
"release_date": "2025-11-05T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Potential mitigations for this issue include:\n\n* Using rootless containers, as doing so will block most of the inadvertent writes (runc would run with reduced privileges, making attempts to write to procfs files ineffective).\n* Based on our analysis, neither AppArmor or SELinux can protect against the full version of the redirected write attack. The container runtime is generally privileged enough to write to arbitrary procfs files, which is more than sufficient to cause a container breakout.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2025-58754",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-09-12T02:00:53.897605+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2394735"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response.\nThis path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: \u0027stream\u0027.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios DoS via lack of data size check",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Availability impact is limited to the application which bundles axios and not the host Red Hat system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "RHBZ#2394735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2394735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58754"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593",
"url": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/7011",
"url": "https://github.com/axios/axios/pull/7011"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.12.0",
"url": "https://github.com/axios/axios/releases/tag/v1.12.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj"
}
],
"release_date": "2025-09-12T01:16:40.513000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios DoS via lack of data size check"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in urllib3\u0027s streaming API that can lead to excessive resource consumption, including high CPU usage and significant memory allocation. When processing highly compressed data from untrusted sources, even small requested chunks can trigger full decompression, posing a denial-of-service risk to client-side applications utilizing affected urllib3 versions prior to 2.6.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2025-66506",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2025-12-04T23:01:20.507333+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419056"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat as Fulcio, a certificate authority used for issuing code signing certificates, is susceptible to a denial of service when processing a specially crafted OpenID Connect (OIDC) token. This could lead to resource exhaustion and service unavailability in affected Red Hat products that utilize Fulcio.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "RHBZ#2419056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a",
"url": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw",
"url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw"
}
],
"release_date": "2025-12-04T22:04:41.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69223",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T20:01:19.831548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427456"
}
],
"notes": [
{
"category": "description",
"text": "A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host\u0027s memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "RHBZ#2427456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69223",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a",
"url": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg"
}
],
"release_date": "2026-01-05T22:00:17.715000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb"
},
{
"cve": "CVE-2025-69227",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-01-06T00:01:17.036900+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via specially crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products as it can lead to a Denial of Service (DoS) in applications utilizing the `aiohttp` library. Exploitation requires Python optimizations to be explicitly enabled (e.g., via `-O` or `PYTHONOPTIMIZE=1`) and the application to process POST requests using the `Request.post()` method. Red Hat products are affected if they meet these specific configuration and usage criteria.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "RHBZ#2427256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259",
"url": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23"
}
],
"release_date": "2026-01-05T23:19:31.396000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via specially crafted POST request"
},
{
"cve": "CVE-2025-69228",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T00:01:02.119065+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427254"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server\u0027s memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. A flaw in aiohttp allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted POST request to an aiohttp server that utilizes the `Request.post()` method. This can lead to uncontrolled memory consumption, freezing the server and making the server unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "RHBZ#2427254",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427254"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69228",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60",
"url": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf"
}
],
"release_date": "2026-01-05T23:30:33.440000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9595",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-15T16:01:15.427658+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488934"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as \u0027/\u0027, and enables WebSocket (ws: true) forwarding, the development server\u0027s own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser\u0027s cookies and Origin header to the proxy target, bypassing the server\u0027s Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "RHBZ#2488934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488934"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/facebook/create-react-app/pull/7444",
"url": "https://github.com/facebook/create-react-app/pull/7444"
},
{
"category": "external",
"summary": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb",
"url": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/pull/4316",
"url": "https://github.com/webpack/webpack-dev-server/pull/4316"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79",
"url": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79"
}
],
"release_date": "2026-06-15T15:00:21.488000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid configuring `webpack-dev-server` with a broad proxy context (e.g., `/`) when WebSocket forwarding (`ws: true`) is enabled. Instead, define specific paths for the proxy context. Alternatively, disable WebSocket forwarding by omitting `ws: true` from the proxy entry if WebSocket functionality is not required for the proxy target. This configuration change may require restarting the `webpack-dev-server` instance to take effect.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"cve": "CVE-2026-23745",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-01-16T23:01:26.508727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430538"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the node-tar library. The flaw allows an attacker to perform arbitrary file overwrite and symlink poisoning by crafting malicious tar archives. This occurs due to insufficient path sanitization of hardlink and symbolic link entries, even when the default secure behavior (preservePaths is false) is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "RHBZ#2430538",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430538"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23745"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e",
"url": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97"
}
],
"release_date": "2026-01-16T22:00:08.769000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit for Containers 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:42043
Vulnerability from csaf_redhat - Published: 2026-07-20 13:29 - Updated: 2026-08-24 17:45Summary
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.1 release.
Severity
Important
Notes
Topic: Red Hat Web Terminal Operator 1.11.1 has been released.
Details: The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 | — |
Workaround
|
Threats
Impact
Important
References
79 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Web Terminal Operator 1.11.1 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42043",
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-401",
"url": "https://redhat.atlassian.net/browse/WTO-401"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-406",
"url": "https://redhat.atlassian.net/browse/WTO-406"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-412",
"url": "https://redhat.atlassian.net/browse/WTO-412"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-417",
"url": "https://redhat.atlassian.net/browse/WTO-417"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-424",
"url": "https://redhat.atlassian.net/browse/WTO-424"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-430",
"url": "https://redhat.atlassian.net/browse/WTO-430"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-444",
"url": "https://redhat.atlassian.net/browse/WTO-444"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-453",
"url": "https://redhat.atlassian.net/browse/WTO-453"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42043.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.1 release.",
"tracking": {
"current_release_date": "2026-08-24T17:45:34+00:00",
"generator": {
"date": "2026-08-24T17:45:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42043",
"initial_release_date": "2026-07-20T13:29:54+00:00",
"revision_history": [
{
"date": "2026-07-20T13:29:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T17:45:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Web Terminal 1.11",
"product": {
"name": "Red Hat Web Terminal 1.11",
"product_id": "Red Hat Web Terminal 1.11",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:webterminal:1.11::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Web Terminal"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-exec-rhel9@sha256%3A79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-exec-rhel9\u0026tag=1784296203"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-rhel9-operator@sha256%3A3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-rhel9-operator\u0026tag=1784296209"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-operator-bundle@sha256%3A457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-operator-bundle\u0026tag=1784296183"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-tooling-rhel9@sha256%3A57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-tooling-rhel9\u0026tag=1784296242"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64 as a component of Red Hat Web Terminal 1.11",
"product_id": "Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64 as a component of Red Hat Web Terminal 1.11",
"product_id": "Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64 as a component of Red Hat Web Terminal 1.11",
"product_id": "Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64 as a component of Red Hat Web Terminal 1.11",
"product_id": "Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.11"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:29:54+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:79f71e67817f8f200639d5b5f4677a7fe12a6f747e8723967c7591cebf777018_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:457832549dec1979b636e42d7a51587f46f2e8ff66b2598369058e6dd2de35dc_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:3afb7495874dd97d4604d56cc9ca2be352629bb011084c54680a277f6487e846_amd64",
"Red Hat Web Terminal 1.11:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:57f584e5e4a25f07cb5a13968b20978c8557715411f55224acf6617ab96a9277_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
RHSA-2026:42047
Vulnerability from csaf_redhat - Published: 2026-07-20 13:55 - Updated: 2026-08-25 02:46Summary
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.12.1 release.
Severity
Important
Notes
Topic: Red Hat Web Terminal Operator 1.12.1 has been released.
Details: The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 | — |
Workaround
|
Threats
Impact
Important
References
89 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Web Terminal Operator 1.12.1 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42047",
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-359",
"url": "https://redhat.atlassian.net/browse/WTO-359"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-402",
"url": "https://redhat.atlassian.net/browse/WTO-402"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-407",
"url": "https://redhat.atlassian.net/browse/WTO-407"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-413",
"url": "https://redhat.atlassian.net/browse/WTO-413"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-418",
"url": "https://redhat.atlassian.net/browse/WTO-418"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-429",
"url": "https://redhat.atlassian.net/browse/WTO-429"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-433",
"url": "https://redhat.atlassian.net/browse/WTO-433"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-448",
"url": "https://redhat.atlassian.net/browse/WTO-448"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-450",
"url": "https://redhat.atlassian.net/browse/WTO-450"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42047.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Web Terminal Operator 1.12.1 release.",
"tracking": {
"current_release_date": "2026-08-25T02:46:04+00:00",
"generator": {
"date": "2026-08-25T02:46:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42047",
"initial_release_date": "2026-07-20T13:55:38+00:00",
"revision_history": [
{
"date": "2026-07-20T13:55:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T02:46:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Web Terminal 1.12",
"product": {
"name": "Red Hat Web Terminal 1.12",
"product_id": "Red Hat Web Terminal 1.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:webterminal:1.12::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Web Terminal"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-exec-rhel9@sha256%3A423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-exec-rhel9\u0026tag=1784247610"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-rhel9-operator@sha256%3Ad32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-rhel9-operator\u0026tag=1784247621"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-operator-bundle@sha256%3A7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-operator-bundle\u0026tag=1784247593"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-tooling-rhel9@sha256%3A43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-tooling-rhel9\u0026tag=1784247667"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64 as a component of Red Hat Web Terminal 1.12",
"product_id": "Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64 as a component of Red Hat Web Terminal 1.12",
"product_id": "Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64 as a component of Red Hat Web Terminal 1.12",
"product_id": "Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64 as a component of Red Hat Web Terminal 1.12",
"product_id": "Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:38+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:423baadb7daeaf78b5df584e7e5e8f2ad991e0db803a22ec7a90f7d468e55415_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:7319fa6637e0c4111633194a7e83d0105dda2ee161040eed6901cb7e45b6ad97_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:d32c93e5c790ad660161326837341f968ce0ed9bfd7ad2232ee27a2b56ef2526_amd64",
"Red Hat Web Terminal 1.12:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:43afcf8bfefccdb35c95d4e875fd610e56e6aba93947c6203fcade80e494e7d8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
RHSA-2026:42048
Vulnerability from csaf_redhat - Published: 2026-07-20 13:55 - Updated: 2026-08-24 17:45Summary
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.16.1 release.
Severity
Important
Notes
Topic: Red Hat Web Terminal Operator 1.16.1 has been released.
Details: The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64 | — |
Workaround
|
Threats
Impact
Important
References
52 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Web Terminal Operator 1.16.1 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42048",
"url": "https://access.redhat.com/errata/RHSA-2026:42048"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-411",
"url": "https://redhat.atlassian.net/browse/WTO-411"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-422",
"url": "https://redhat.atlassian.net/browse/WTO-422"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-426",
"url": "https://redhat.atlassian.net/browse/WTO-426"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-435",
"url": "https://redhat.atlassian.net/browse/WTO-435"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-451",
"url": "https://redhat.atlassian.net/browse/WTO-451"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42048.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Web Terminal Operator 1.16.1 release.",
"tracking": {
"current_release_date": "2026-08-24T17:45:35+00:00",
"generator": {
"date": "2026-08-24T17:45:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42048",
"initial_release_date": "2026-07-20T13:55:42+00:00",
"revision_history": [
{
"date": "2026-07-20T13:55:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T17:45:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Web Terminal 1.16",
"product": {
"name": "Red Hat Web Terminal 1.16",
"product_id": "Red Hat Web Terminal 1.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:webterminal:1.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Web Terminal"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-exec-rhel9@sha256%3A365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-exec-rhel9\u0026tag=1784295767"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-rhel9-operator@sha256%3Af331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-rhel9-operator\u0026tag=1784295778"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-operator-bundle@sha256%3A25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-operator-bundle\u0026tag=1784295748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-tooling-rhel9@sha256%3Afefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-tooling-rhel9\u0026tag=1784295793"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64 as a component of Red Hat Web Terminal 1.16",
"product_id": "Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64 as a component of Red Hat Web Terminal 1.16",
"product_id": "Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64 as a component of Red Hat Web Terminal 1.16",
"product_id": "Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64 as a component of Red Hat Web Terminal 1.16",
"product_id": "Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:42+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.21 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42048"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:42+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.21 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42048"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:42+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.21 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42048"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:42+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.21 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42048"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:42+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.21 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42048"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:365e1253b8da2ba88ec97ec5b074d16ac46b31fd7eba3baad6587ce8959b11bf_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:25e450ef9a1bbdb5e6d522a98928c0784c483de40f17ee111e8c32e59c4e78c9_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:f331222fc180e7195d51536dab01692da66ad9049671e034867855dce1e5b656_amd64",
"Red Hat Web Terminal 1.16:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fefa9980c5021706ccac27d05086359f45109790089e586221c08271b55b1b25_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
RHSA-2026:42049
Vulnerability from csaf_redhat - Published: 2026-07-20 13:55 - Updated: 2026-08-25 04:46Summary
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.15.1 release.
Severity
Important
Notes
Topic: Red Hat Web Terminal Operator 1.15.1 has been released.
Details: The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — | ||
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 | — |
Workaround
|
Threats
Impact
Important
References
86 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Web Terminal Operator 1.15.1 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42049",
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-398",
"url": "https://redhat.atlassian.net/browse/WTO-398"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-405",
"url": "https://redhat.atlassian.net/browse/WTO-405"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-410",
"url": "https://redhat.atlassian.net/browse/WTO-410"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-416",
"url": "https://redhat.atlassian.net/browse/WTO-416"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-421",
"url": "https://redhat.atlassian.net/browse/WTO-421"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-427",
"url": "https://redhat.atlassian.net/browse/WTO-427"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-432",
"url": "https://redhat.atlassian.net/browse/WTO-432"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-445",
"url": "https://redhat.atlassian.net/browse/WTO-445"
},
{
"category": "external",
"summary": "https://redhat.atlassian.net/browse/WTO-454",
"url": "https://redhat.atlassian.net/browse/WTO-454"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42049.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Web Terminal Operator 1.15.1 release.",
"tracking": {
"current_release_date": "2026-08-25T04:46:35+00:00",
"generator": {
"date": "2026-08-25T04:46:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:42049",
"initial_release_date": "2026-07-20T13:55:43+00:00",
"revision_history": [
{
"date": "2026-07-20T13:55:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T04:46:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Web Terminal 1.15",
"product": {
"name": "Red Hat Web Terminal 1.15",
"product_id": "Red Hat Web Terminal 1.15",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:webterminal:1.15::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Web Terminal"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-exec-rhel9@sha256%3Ad1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-exec-rhel9\u0026tag=1784296033"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-rhel9-operator@sha256%3Aadfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-rhel9-operator\u0026tag=1784296045"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-operator-bundle@sha256%3A99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-operator-bundle\u0026tag=1784296013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64",
"product": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64",
"product_id": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/web-terminal-tooling-rhel9@sha256%3A9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f?arch=amd64\u0026repository_url=registry.redhat.io/web-terminal/web-terminal-tooling-rhel9\u0026tag=1784296064"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64 as a component of Red Hat Web Terminal 1.15",
"product_id": "Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64 as a component of Red Hat Web Terminal 1.15",
"product_id": "Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64 as a component of Red Hat Web Terminal 1.15",
"product_id": "Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64 as a component of Red Hat Web Terminal 1.15",
"product_id": "Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
},
"product_reference": "registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64",
"relates_to_product_reference": "Red Hat Web Terminal 1.15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"known_not_affected": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T13:55:43+00:00",
"details": "To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.20 or higher.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:d1b0f8f0884aff5087d6c4d0c8a08b1e3952ff58ab91c15d4d6432dcdcf3de08_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:99fff357ed224f5fea600161b7467d28185ec07583240fa4bd21ab146448fe4a_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:adfc3751f3512134d2e500f5bf57c6bcd4ef570704485436aa584e9d54e3f898_amd64",
"Red Hat Web Terminal 1.15:registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:9c8a6913c0bb401ca4d0287382d758c8cb96f54aae78ad536b35552f7013bd4f_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…